Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

#copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

Scheduled Pinned Locked Moved Uncategorized
copyfail
36 Posts 13 Posters 0 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • wren6991@types.plW wren6991@types.pl

    @whitequark containers: the convenience of a VM and the security of rawdogging userspace 😎

    whitequark@social.treehouse.systemsW This user is from outside of this forum
    whitequark@social.treehouse.systemsW This user is from outside of this forum
    whitequark@social.treehouse.systems
    wrote last edited by
    #20

    @wren6991 yep

    1 Reply Last reply
    0
    • chaos@gts.schizofucked.monsterC chaos@gts.schizofucked.monster

      @whitequark hoping there is a way to speed up vm launch time though, if you have any resources that might be useful, feel free to send us, medical issues are making it almost impossible for us to focus enough to find resources on how to best do this kinda thing securely and decently

      while we'd love to use xcp-ng, the old kernel / xen kinda limits its use on little guys (fucked cpu freq scaling), and proxmox requires so much host configuration for our weird setups which we'd rather avoid, so making our own embedded style alpine distro with A/B boot specifically for this

      whitequark@social.treehouse.systemsW This user is from outside of this forum
      whitequark@social.treehouse.systemsW This user is from outside of this forum
      whitequark@social.treehouse.systems
      wrote last edited by
      #21

      @chaos firecracker or crosvm is the current plan but i'm not recommending either until i get actual operational experience

      chaos@gts.schizofucked.monsterC 1 Reply Last reply
      0
      • thejpster@hachyderm.ioT thejpster@hachyderm.io

        @whitequark I suspect you won't be using VMware vSphere and the VMware Perl SDK though 😕

        whitequark@social.treehouse.systemsW This user is from outside of this forum
        whitequark@social.treehouse.systemsW This user is from outside of this forum
        whitequark@social.treehouse.systems
        wrote last edited by
        #22

        @thejpster mercifully, no

        1 Reply Last reply
        0
        • alex@feed.yopp.meA alex@feed.yopp.me

          @whitequark I have my old box collecting dust while waiting for a crazy enough buyer. Im slowly lowering price, but probably it’s not going to be sold in next few months.

          If it’s any use for you in meantime, I can give you direct access to bcm webui so you can do whatever you like with it 🙂

          We can figure out how much of heads up you need in case someone would be willing to buy it. And I have second low power box that can be used for backups

          EPYC 7551P (1gen, 32C/64T) on Gigabyte MZ01-CE1 (with browser based KVM)
          RAM 256G: 8× 32G M393A4K40BB2-CTD DDR4-2666
          NVME 2T: 1× WD Black SN850X
          HDD 12T: 4× 3TB HGST Ultrastar 7K300

          • 2× Tesla P40 (if you are in a mood for messing with sharing gpu with workers)
          whitequark@social.treehouse.systemsW This user is from outside of this forum
          whitequark@social.treehouse.systemsW This user is from outside of this forum
          whitequark@social.treehouse.systems
          wrote last edited by
          #23

          @alex access would help a lot for testing, yeah!

          alex@feed.yopp.meA 1 Reply Last reply
          0
          • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

            @chaos firecracker or crosvm is the current plan but i'm not recommending either until i get actual operational experience

            chaos@gts.schizofucked.monsterC This user is from outside of this forum
            chaos@gts.schizofucked.monsterC This user is from outside of this forum
            chaos@gts.schizofucked.monster
            wrote last edited by
            #24

            @whitequark let us know how you get on with em

            we did some hacking on crosvm and used it a while ago but knowledge gained never sync'd

            whitequark@social.treehouse.systemsW 1 Reply Last reply
            0
            • chaos@gts.schizofucked.monsterC chaos@gts.schizofucked.monster

              @whitequark let us know how you get on with em

              we did some hacking on crosvm and used it a while ago but knowledge gained never sync'd

              whitequark@social.treehouse.systemsW This user is from outside of this forum
              whitequark@social.treehouse.systemsW This user is from outside of this forum
              whitequark@social.treehouse.systems
              wrote last edited by
              #25

              @chaos ack, I will be sharing it here

              1 Reply Last reply
              0
              • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

                snowfox@tech.lgbtS This user is from outside of this forum
                snowfox@tech.lgbtS This user is from outside of this forum
                snowfox@tech.lgbt
                wrote last edited by
                #26

                @whitequark Wow... that one is pretty bad.

                Guess I'm deleting some kernel modules today.

                1 Reply Last reply
                0
                • thejpster@hachyderm.ioT thejpster@hachyderm.io

                  @whitequark I suspect you won't be using VMware vSphere and the VMware Perl SDK though 😕

                  autumnwinds@mathstodon.xyzA This user is from outside of this forum
                  autumnwinds@mathstodon.xyzA This user is from outside of this forum
                  autumnwinds@mathstodon.xyz
                  wrote last edited by
                  #27

                  @thejpster i have to say Solaris zones are surprisingly slow for this

                  1 Reply Last reply
                  0
                  • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                    @alex access would help a lot for testing, yeah!

                    alex@feed.yopp.meA This user is from outside of this forum
                    alex@feed.yopp.meA This user is from outside of this forum
                    alex@feed.yopp.me
                    wrote last edited by
                    #28

                    @whitequark awesome! Gimme some time, I'll prepare everything. How can I reach you to hand over access credentials?

                    whitequark@social.treehouse.systemsW 1 Reply Last reply
                    1
                    0
                    • R relay@relay.mycrowd.ca shared this topic
                    • alex@feed.yopp.meA alex@feed.yopp.me

                      @whitequark awesome! Gimme some time, I'll prepare everything. How can I reach you to hand over access credentials?

                      whitequark@social.treehouse.systemsW This user is from outside of this forum
                      whitequark@social.treehouse.systemsW This user is from outside of this forum
                      whitequark@social.treehouse.systems
                      wrote last edited by
                      #29

                      @alex whitequark@whitequark.org, you can encrypt to https://codeberg.org/whitequark.keys

                      alex@feed.yopp.meA 1 Reply Last reply
                      0
                      • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                        #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

                        jorijn@toot.communityJ This user is from outside of this forum
                        jorijn@toot.communityJ This user is from outside of this forum
                        jorijn@toot.community
                        wrote last edited by
                        #30

                        @whitequark wanna tell me a bit more about that forgejo runner system? 🙂 interested.

                        whitequark@social.treehouse.systemsW 1 Reply Last reply
                        0
                        • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                          #copyfail is why the Forgejo Actions runner service i'm setting up will be using kvm and single shot VMs rather than containers

                          ananas@scicomm.xyzA This user is from outside of this forum
                          ananas@scicomm.xyzA This user is from outside of this forum
                          ananas@scicomm.xyz
                          wrote last edited by
                          #31

                          @whitequark What do you use the orchestrate the VMs? Every time I try to do this I end up trying to reinvent half of libvirt.

                          whitequark@social.treehouse.systemsW 1 Reply Last reply
                          0
                          • jorijn@toot.communityJ jorijn@toot.community

                            @whitequark wanna tell me a bit more about that forgejo runner system? 🙂 interested.

                            whitequark@social.treehouse.systemsW This user is from outside of this forum
                            whitequark@social.treehouse.systemsW This user is from outside of this forum
                            whitequark@social.treehouse.systems
                            wrote last edited by
                            #32

                            @jorijn it's very much WIP

                            jorijn@toot.communityJ 1 Reply Last reply
                            0
                            • ananas@scicomm.xyzA ananas@scicomm.xyz

                              @whitequark What do you use the orchestrate the VMs? Every time I try to do this I end up trying to reinvent half of libvirt.

                              whitequark@social.treehouse.systemsW This user is from outside of this forum
                              whitequark@social.treehouse.systemsW This user is from outside of this forum
                              whitequark@social.treehouse.systems
                              wrote last edited by
                              #33

                              @ananas nothing specific yet, trying out some stuff

                              1 Reply Last reply
                              0
                              • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                                @jorijn it's very much WIP

                                jorijn@toot.communityJ This user is from outside of this forum
                                jorijn@toot.communityJ This user is from outside of this forum
                                jorijn@toot.community
                                wrote last edited by
                                #34

                                @whitequark interesting nonetheless, does it resemble https://codeberg.org/forgejo/discussions/issues/152?

                                whitequark@social.treehouse.systemsW 1 Reply Last reply
                                0
                                • jorijn@toot.communityJ jorijn@toot.community

                                  @whitequark interesting nonetheless, does it resemble https://codeberg.org/forgejo/discussions/issues/152?

                                  whitequark@social.treehouse.systemsW This user is from outside of this forum
                                  whitequark@social.treehouse.systemsW This user is from outside of this forum
                                  whitequark@social.treehouse.systems
                                  wrote last edited by
                                  #35

                                  @jorijn i'm leaving the actual forgejo specific bits until the end, want to see that i can reliably and quickly spawn VMs first

                                  1 Reply Last reply
                                  0
                                  • whitequark@social.treehouse.systemsW whitequark@social.treehouse.systems

                                    @alex whitequark@whitequark.org, you can encrypt to https://codeberg.org/whitequark.keys

                                    alex@feed.yopp.meA This user is from outside of this forum
                                    alex@feed.yopp.meA This user is from outside of this forum
                                    alex@feed.yopp.me
                                    wrote last edited by
                                    #36

                                    @whitequark i made just one regrettable descision and now im here, lol. I was absolutely sure this router just works™ on mainline openwrt

                                    Link Preview Image
                                    1 Reply Last reply
                                    1
                                    0
                                    Reply
                                    • Reply as topic
                                    Log in to reply
                                    • Oldest to Newest
                                    • Newest to Oldest
                                    • Most Votes


                                    • Login

                                    • Login or register to search.
                                    • First post
                                      Last post
                                    0
                                    • Categories
                                    • Recent
                                    • Tags
                                    • Popular
                                    • World
                                    • Users
                                    • Groups